handed over login to users controller